The Patching Friars' AlmanacA calendar of CVE saints

April 29

Copy FailHoly card for copy-fail, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 algif_aead Copy Fail COPIA FALLAX
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Copy Fail, Who Got the Copy Wrong

Patron of Linux kernels from 2017 onwards, optimisations nobody remembers, and containers sharing the same kernel.

Life

On 29 April 2026 the team behind Xint Code, Theori's analysis tool, revealed Copy Fail: a logic error in the Linux kernel's crypto code, introduced in 2017 by an optimisation that worked "in place". It let an unprivileged local user become root on practically every major distribution, and escape from containers. The tool found it in about an hour of scanning; CISA added it to its exploited list a few days later.

Prayer

O Saint Copy Fail, who to save one copy got one wrong, let our optimisations be reviewed as carefully as everything else. Amen.

How to celebrate

Celebrated by installing the updated kernel, which goes back to copying properly, or at least disabling the algif_aead module until the reboot.

Copy with care, and you'll never despair.

Technical record

Disclosed on
April 29 2026
CVE
CVE-2026-31431
CVSS
7.8Actively exploited (CISA KEV)
Product
Linux · Linux

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.

Sources: copy.fail · xint.io · cisa.gov

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.